$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a6afd562-0cd1-3a8c-bebe-dd3825b8b061.roa File: a6afd562-0cd1-3a8c-bebe-dd3825b8b061.roa (raw, json) Hash identifier: x+AOD/VpGCLEVChpTV2se8ABRUcT2wLtaH7CWlMpouc= Subject key identifier: 48:61:81:1D:9C:24:6D:FF:E8:33:90:18:BF:23:47:59:57:C4:7B:6A Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584AF012661AE67AC6CAA1BAC0C0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a6afd562-0cd1-3a8c-bebe-dd3825b8b061.roa Signing time: Fri 22 Aug 2025 05:31:50 +0000 ROA not before: Fri 22 Aug 2025 05:31:50 +0000 ROA not after: Thu 20 Nov 2025 06:31:50 +0000 asID: 31898 IP address blocks: 129.146.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:12:66:1a:e6:7a:c6:ca:a1:ba:c0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 22 05:31:50 2025 GMT Not After : Nov 20 06:31:50 2025 GMT Subject: CN=9b488f4e-e964-4bad-ad44-a14dc5fb1797 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:8f:ed:95:a5:6f:ed:4e:a3:0a:45:e8:31:06: 9a:13:64:33:94:6a:6e:c4:fd:54:e2:5b:08:28:77: dc:69:80:23:b3:24:c4:ca:e4:9d:2e:0a:51:f8:07: 16:27:5e:aa:d1:f0:fb:54:52:64:b5:6d:41:4b:f3: c7:59:11:0a:bf:ae:c9:12:78:9f:9b:9a:00:bf:fc: 55:45:ec:f0:9e:65:a5:7e:3b:52:50:9a:72:42:78: 62:e5:55:d8:d2:ed:f6:97:48:5b:af:bd:37:e6:59: ff:3f:df:8f:f2:b7:a7:f1:85:4f:15:4a:20:dc:01: dc:77:cb:88:c0:f9:c3:7d:02:f3:bf:6c:2c:57:fc: 2c:59:81:b7:c5:4e:8b:52:26:b9:d9:d8:b0:e0:0a: d1:fa:fe:27:00:94:96:9c:c8:46:aa:8e:c7:f6:2f: f2:65:42:f7:15:09:2d:ba:7b:af:64:0f:63:47:3f: 3a:ff:6e:aa:0b:33:ed:34:90:68:f6:61:a9:1f:e5: c0:83:72:31:de:4f:c2:82:0b:27:ce:ba:a2:9f:23: a4:40:bc:22:b9:08:e0:3d:e0:51:22:3a:c6:17:41: 6e:1d:fa:43:c6:29:12:31:10:35:9e:cf:11:e7:56: dc:3c:13:cd:9c:32:88:03:e8:9d:08:c6:1e:73:1f: 5a:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:61:81:1D:9C:24:6D:FF:E8:33:90:18:BF:23:47:59:57:C4:7B:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a6afd562-0cd1-3a8c-bebe-dd3825b8b061.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 129.146.13.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:67:4d:4b:ca:23:56:a2:bd:4d:3b:0f:f9:4f:6f:77:9a:ce: 60:99:c1:ac:a6:22:f4:12:2a:d4:2b:03:5a:09:37:ef:be:b9: bc:bf:29:51:db:41:6d:c0:f3:16:48:88:ad:f3:30:dc:59:84: f7:dc:d6:30:af:5a:31:51:4b:7b:91:63:40:0e:21:48:fc:ba: 7a:d1:d9:0a:d5:4d:e7:8a:82:ff:6f:33:7e:82:9f:25:9b:5d: 19:df:c4:3b:01:df:af:c9:84:06:f0:38:28:c3:dc:da:db:eb: 84:25:b6:9a:30:f9:24:07:13:98:bb:b3:d0:b2:0d:b1:9c:27: 0f:a4:29:aa:b7:6a:71:10:7a:3e:f8:23:eb:a9:f6:37:01:62: e2:f2:54:8e:63:dc:ab:64:e1:be:f4:57:e7:64:38:f0:7c:f3: af:ee:99:6d:e8:e7:0d:73:0c:73:6b:1a:70:c2:2c:93:3d:01: 38:8f:0d:c6:0e:ab:9c:32:c7:ca:9d:94:95:b5:69:3a:0e:65: ee:5f:04:f1:fe:6d:4c:02:0d:53:0e:59:df:40:5b:f8:53:82: 32:6a:66:87:2a:87:2b:5c:cd:a1:84:b5:f0:6d:7c:a8:b3:4b: e4:8a:c6:29:ed:34:71:64:16:d0:0d:4c:a8:33:3e:64:da:57: c6:4a:1c:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErwEmYa5nrGyqG6wMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI1MDgyMjA1MzE1MFoXDTI1MTEyMDA2MzE1MFowLzEtMCsGA1UEAxMk OWI0ODhmNGUtZTk2NC00YmFkLWFkNDQtYTE0ZGM1ZmIxNzk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAko/tlaVv7U6jCkXoMQaaE2QzlGpuxP1U4lsI KHfcaYAjsyTEyuSdLgpR+AcWJ16q0fD7VFJktW1BS/PHWREKv67JEnifm5oAv/xV RezwnmWlfjtSUJpyQnhi5VXY0u32l0hbr7035ln/P9+P8ren8YVPFUog3AHcd8uI wPnDfQLzv2wsV/wsWYG3xU6LUia52diw4ArR+v4nAJSWnMhGqo7H9i/yZUL3FQkt unuvZA9jRz86/26qCzPtNJBo9mGpH+XAg3Ix3k/CggsnzrqinyOkQLwiuQjgPeBR IjrGF0FuHfpDxikSMRA1ns8R51bcPBPNnDKIA+idCMYecx9aIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEhhgR2cJG3/6DOQGL8jR1lXxHtqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYTZhZmQ1NjItMGNkMS0z YThjLWJlYmUtZGQzODI1YjhiMDYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgZINMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFRnTUvKI1aivU07D/lPb3eazmCZwaymIvQSKtQrA1oJN+++uby/KVHb QW3A8xZIiK3zMNxZhPfc1jCvWjFRS3uRY0AOIUj8unrR2QrVTeeKgv9vM36CnyWb XRnfxDsB36/JhAbwOCjD3Nrb64Qltpow+SQHE5i7s9CyDbGcJw+kKaq3anEQej74 I+up9jcBYuLyVI5j3Ktk4b70V+dkOPB886/umW3o5w1zDHNrGnDCLJM9ATiPDcYO q5wyx8qdlJW1aToOZe5fBPH+bUwCDVMOWd9AW/hTgjJqZocqhytczaGEtfBtfKiz S+SKxintNHFkFtANTKgzPmTaV8ZKHKk= -----END CERTIFICATE-----Generated at Sat Aug 23 15:41:09 2025 by rpki-client